837c3a5149ffea5223ee69db3e94d9d4b7cab149bac2431c9fb4cff2510298d0

Sharing

Copy URL Twitter E-mail

General

Target

837c3a5149ffea5223ee69db3e94d9d4b7cab149bac2431c9fb4cff2510298d0
Size

3.1MB
MD5

34d422e027dd6162c0b2b344e362ab22
SHA1

0df7118d6bd1a714e761a638186411fb07054659
SHA256

837c3a5149ffea5223ee69db3e94d9d4b7cab149bac2431c9fb4cff2510298d0
SHA512

01a07c9e0eea8567b24a2ff1cf00aef580c68561b7f39c7b20a573f21e8ced96b140bac299da3aecf426d9823a7e0badc88e6ddd1230641a6df6d208a7d465d2
SSDEEP

12288:OgMr0b/WK9BSdgNEuqeeP6MwtTr3Ec24axFgBvPXIAuuiifOqVxjU:88TWdmeeePKtTTED4KwPXv8qVxjU

Score

1^/10

Malware Config

Signatures

Files

837c3a5149ffea5223ee69db3e94d9d4b7cab149bac2431c9fb4cff2510298d0
.exe windows x86

b942bfc7b6007cf01ddaba4574cf40d3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

dsound

DirectSoundCreate

dinput

DirectInputCreateA

ddraw

DirectDrawCreate

binkw32

_BinkClose@4
_BinkCopyToBuffer@28
_BinkDoFrame@4
_BinkNextFrame@4
_BinkOpen@8
_BinkOpenDirectSound@4
_BinkSetSoundSystem@8
_BinkWait@4

advapi32

RegCloseKey
RegCreateKeyExA
RegFlushKey
RegOpenKeyExA
RegQueryValueExA

kernel32

CloseHandle
CompareStringA
CreateEventA
CreateFileA
CreateFileW
CreateMutexA
DeleteCriticalSection
DeleteFileA
DeleteFileW
EnterCriticalSection
EnumCalendarInfoA
ExitProcess
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindClose
FindFirstFileA
FindNextFileA
FormatMessageA
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentDirectoryA
GetCurrentThreadId
GetDiskFreeSpaceA
GetDriveTypeA
GetEnvironmentStrings
GetEnvironmentVariableA
GetFileAttributesA
GetFileAttributesW
GetFileSize
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetLocaleInfoA
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetSystemDefaultLangID
GetThreadLocale
GetTickCount
GetVersion
GetVersionExA
GetVolumeInformationA
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LocalAlloc
LocalFree
MultiByteToWideChar
RaiseException
ReadFile
ReleaseMutex
RtlUnwind
SetConsoleCtrlHandler
SetCurrentDirectoryA
SetEndOfFile
SetEnvironmentVariableA
SetFilePointer
SetHandleCount
SetLastError
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcpyA
lstrcpynA
lstrlenA

user32

CharNextA
CreateWindowExA
DestroyWindow
EnumThreadWindows
GetActiveWindow
GetDoubleClickTime
GetKeyboardType
GetSystemMetrics
LoadCursorA
LoadIconA
LoadStringA
MessageBoxA
RegisterClassExA
ShowCursor
ShowWindow
UpdateWindow
wsprintfA

winmm

PlaySoundA
timeGetTime

oleaut32

SysAllocStringLen
SysFreeString
SysReAllocStringLen
SysStringLen
VariantChangeTypeEx
VariantClear
VariantCopyInd

Exports

Exports

@$xp$12Des@TDesMode
@Des@BitCP
@Des@BitExp
@Des@BitIP
@Des@BitPM
@Des@BitPMC1
@Des@BitPMC2
@Des@DecryStr$qqr17System@AnsiStringt1
@Des@DecryStrHex$qqr17System@AnsiStringt1
@Des@EncryStr$qqr17System@AnsiStringt1
@Des@EncryStrHex$qqr17System@AnsiStringt1
@Des@Finalization$qqrv
@Des@initialization$qqrv
@Des@sBox
@Des@subKey
__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 422KB - Virtual size: 424KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bind
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b942bfc7b6007cf01ddaba4574cf40d3

Headers

File Characteristics

Imports

dsound

dinput

ddraw

binkw32

advapi32

kernel32

user32

winmm

oleaut32

Exports

Exports

Sections

.text Size: 422KB - Virtual size: 424KB

.data Size: 2.5MB - Virtual size: 3.5MB

.tls Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 4KB - Virtual size: 4KB

.edata Size: 1024B - Virtual size: 4KB

.rsrc Size: 13KB - Virtual size: 16KB

.reloc Size: 25KB - Virtual size: 28KB

.bind Size: 166KB - Virtual size: 166KB

.text
Size: 422KB - Virtual size: 424KB

.data
Size: 2.5MB - Virtual size: 3.5MB

.tls
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 4KB - Virtual size: 4KB

.edata
Size: 1024B - Virtual size: 4KB

.rsrc
Size: 13KB - Virtual size: 16KB

.reloc
Size: 25KB - Virtual size: 28KB

.bind
Size: 166KB - Virtual size: 166KB